Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File:                     LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier:          b5HWv23edO9AYEEj0TK9StKP0lFUbd30tmOT4WDAkg8=
Subject key identifier:   76:21:28:A5:34:93:58:02:6D:CC:B1:73:5B:39:F2:54:71:A4:64:BF
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer:       /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial:       019A16173B5D351FDD188E10C923BA4F63B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number:          01EB
Signing time:             Fri 24 Oct 2025 12:00:12 +0000
Manifest this update:     Fri 24 Oct 2025 12:00:12 +0000
Manifest next update:     Sat 25 Oct 2025 12:00:12 +0000
Files and hashes:         1: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (hash: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=)
                          2: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
                          3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
                          4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: /xo8/0piAf0eWgZFRjCe8v7qAntb88PtKT3GYGWEODE=)
                          5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
                          6: mgJ3Sc6KxuSRQNVYzl0KbaYNlDY.roa (hash: +UkcMaXx37s6HLo3vytB7ItB+h6lkh9Nk4bNEQS1Dtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:16:17:3b:5d:35:1f:dd:18:8e:10:c9:23:ba:4f:63:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
        Validity
            Not Before: Oct 24 12:00:12 2025 GMT
            Not After : Oct 25 12:00:12 2025 GMT
        Subject: CN=762128a5349358026dccb1735b39f25471a464bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:29:d6:e5:85:20:d8:47:90:87:a8:ac:0d:
                    b5:ad:c6:47:07:c8:12:11:29:2f:a3:27:b0:6e:cc:
                    e2:6a:12:d6:e0:e0:d7:d9:19:f5:d2:30:ce:38:3d:
                    3a:ca:ad:ba:8f:79:06:db:8c:b0:36:23:01:65:9e:
                    0f:43:d5:dd:b6:be:89:eb:86:20:f6:e9:f0:e3:46:
                    7b:f0:68:20:8a:6b:f7:8a:8e:d2:3e:39:4e:4e:5f:
                    1b:78:88:d9:c3:8e:8e:e0:b1:24:0b:2b:35:69:b8:
                    7a:3b:2d:ef:98:0f:d4:8e:e0:eb:6c:89:3c:58:35:
                    df:24:f1:ba:be:ea:eb:58:22:44:f0:79:91:f1:99:
                    c4:7e:28:de:52:84:b3:5d:8e:c0:67:8a:45:e8:4a:
                    90:fb:b5:a7:70:c5:6e:69:29:6e:94:8c:e5:82:64:
                    aa:b2:aa:06:4d:53:e5:13:66:01:57:cf:ce:9a:ea:
                    cc:39:80:47:44:13:b3:40:ab:9e:a4:44:7a:15:df:
                    79:dc:fb:e4:8e:8b:8c:9b:40:10:06:a5:66:a7:22:
                    e4:0d:3f:34:90:83:f7:5d:d3:b7:ba:ad:c8:67:0a:
                    5a:21:91:ae:2b:6d:2f:43:c8:39:26:d6:5e:90:4c:
                    70:df:33:50:0c:8b:cd:e3:9b:0d:e9:6a:79:95:a8:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:21:28:A5:34:93:58:02:6D:CC:B1:73:5B:39:F2:54:71:A4:64:BF
            X509v3 Authority Key Identifier:
                keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:67:e8:a0:fc:03:b7:f9:2c:aa:b7:1a:16:00:b2:79:95:
         8d:7b:58:0e:e9:f0:da:6c:d8:a3:1a:5a:0d:c7:69:b1:29:51:
         3d:66:c6:09:eb:d3:40:34:e8:1f:a8:73:c2:20:86:dc:bb:f7:
         08:46:02:dc:e0:18:b3:54:fe:72:0e:ef:8e:2a:89:6b:45:4d:
         8c:69:f2:77:e4:e7:84:3d:5b:4a:1c:7d:69:56:bc:8b:7c:cb:
         32:d5:62:1c:d1:db:56:f9:23:79:f5:d4:77:45:27:c4:f5:41:
         8b:96:75:a4:df:05:34:cd:74:c5:cf:8c:3d:63:6d:a2:ed:6b:
         27:0a:0d:88:03:5b:eb:e7:45:92:c8:72:a4:52:7d:c1:9c:50:
         b9:b6:82:7a:53:86:a5:5a:79:f1:e9:39:8d:04:4b:84:ca:fe:
         02:e8:69:63:8b:e8:17:44:17:21:2b:c1:61:12:6b:89:66:0a:
         e6:a8:2a:6f:56:bd:e4:db:d2:25:fb:87:41:33:fa:82:5e:5d:
         ed:f8:ce:e0:9e:84:07:62:60:6e:ec:c5:c5:a1:1e:29:fc:87:
         77:c7:92:f7:08:fb:8e:69:21:8e:b3:05:8f:85:11:f2:88:e6:
         03:18:e9:50:e2:4e:b2:d3:5b:c2:7f:7d:c1:09:1d:ce:75:bf:
         84:ab:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:54:09 2025 by rpki-client